Was Manulife Forcing Clients to Consent to Data Transfer?

Was Manulife Forcing Clients to Consent to Data Transfer?

In May 2011, a Manulife customer found that logging into his MPF account online required consenting to let Manulife transfer his personal data for product marketing — no consent, no login. He was alarmed data could silently go to third parties, and noted employees couldn’t even choose their trustee.

How did the watchdogs respond?

The Privacy Commissioner launched a compliance check, proactively engaging the company. The MPFA pressed the trustee to make opting out of marketing easier. Manulife said the revised terms concerned a new MPF service, not privacy.

Why was it so sensitive?

The Octopus “data selling” saga had put personal-data transfers in the spotlight. MPF accounts hold full personal details; their use must stay within the law.

How can members protect themselves?

Read terms before logging into any financial account, and opt out of marketing. Compare MPF providers when choosing trustees.